IS
Vendor
Ideal Science
2 products with CVEs on record
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2006-2321
ID
Idealbb
Ideal Science
–
1%
May 12Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors
CVE-2006-2317
ID
Idealbb
Ideal Science
–
2%
May 12Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to…
CVE-2006-2318
ID
Idealbb
Ideal Science
–
2%
May 12Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the…
CVE-2006-2319
ID
Idealbb
Ideal Science
–
2%
May 12Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script…
CVE-2006-2320
ID
Idealbb
Ideal Science
–
1%
May 12Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors…
CVE-2005-4078
IB
Ideal Bb.net
Ideal Science
–
2%
Dec 8Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID,…
CVE-2004-2208
ID
Idealbb
Ideal Science
–
1%
Dec 31CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors
CVE-2004-2209
ID
Idealbb
Ideal Science
–
1%
Dec 31SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors
CVE-2004-2207
ID
Idealbb
Ideal Science
–
1%
Dec 31Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors